Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7ECD5B0DA5011EFBB2D7759762E951A.roa
File: A7ECD5B0DA5011EFBB2D7759762E951A.roa (raw, json)
Hash identifier: Y94deYlnG7i/DzOJSPnN5p7wSCPc/GUY8wkvfmn+czo=
Subject key identifier: 20:3D:BC:15:BA:B2:1A:07:68:27:C4:BC:98:A8:14:EA:0A:33:07:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7ECD5B0DA5011EFBB2D7759762E951A.roa
Signing time: Fri 24 Jan 2025 12:42:22 +0000
ROA not before: Fri 24 Jan 2025 12:42:18 +0000
ROA not after: Wed 05 Mar 2025 12:42:18 +0000
asID: 44559
IP address blocks: 154.209.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83701 (0x146f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:42:18 2025 GMT
Not After : Mar 5 12:42:18 2025 GMT
Subject: CN=67938aae-147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:2e:db:1a:bc:ca:b3:45:0e:61:3b:a4:73:
48:c9:4b:3c:47:d6:a4:dc:26:70:41:27:c3:9e:82:
be:a1:30:31:1a:21:b9:56:78:b9:d5:08:bd:b3:c4:
b5:ce:26:2f:8b:f8:be:55:87:25:1d:ca:d7:9d:61:
d9:e9:75:20:ae:a6:88:f7:d1:2f:88:45:be:52:a6:
7d:13:7e:79:ba:26:f6:31:36:13:05:2f:df:b6:75:
79:26:2d:5d:93:f9:ce:ec:b1:d8:14:2c:97:0d:0e:
8b:f9:55:b6:91:ed:43:97:fc:e4:44:b1:ee:fd:8b:
72:8e:31:be:b1:6d:c8:b1:df:ee:4e:d5:8f:bb:af:
7b:a8:ce:31:59:c6:45:68:3c:fd:59:d1:00:a0:27:
3c:f9:79:47:7a:2a:2d:63:95:e9:14:bc:f2:79:4a:
6f:16:0c:96:f8:93:7b:e0:cd:c3:22:b9:42:87:20:
0b:6e:22:48:04:2b:84:95:7b:67:7d:30:1e:c4:6b:
29:2a:6f:84:6d:47:9f:60:35:82:f0:00:65:9b:44:
b7:a0:0e:0f:51:cb:0d:f1:cc:35:cd:5d:d3:94:02:
fe:3b:f9:b7:35:2f:4f:28:8d:9e:12:ca:05:54:e9:
a5:0a:58:0b:91:76:d6:19:c1:55:9f:a3:6c:33:1f:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3D:BC:15:BA:B2:1A:07:68:27:C4:BC:98:A8:14:EA:0A:33:07:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7ECD5B0DA5011EFBB2D7759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.153.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6f:ec:7c:9d:05:3a:df:5d:65:62:ba:6c:17:e7:13:7f:56:
8a:99:f3:e9:b3:51:b8:66:04:a0:c8:22:6b:1a:04:45:d0:0a:
ce:a2:fd:af:eb:41:f5:2f:5d:ec:f4:ed:37:7e:0d:32:22:94:
22:b2:0e:74:00:57:a3:b2:47:24:7d:ee:49:0b:53:90:84:e2:
98:44:9d:5d:90:67:16:8a:4b:ab:84:04:b7:ee:fe:9d:5e:cc:
0e:5c:30:22:34:81:80:11:b6:b6:45:59:f9:1f:56:56:93:df:
74:9f:f2:93:29:de:7f:e0:19:fc:e3:02:76:7a:ec:74:87:a1:
8d:30:21:e6:19:93:33:46:83:d6:8e:6f:b9:57:e6:5f:ed:72:
03:06:5a:ca:76:f6:f6:78:ce:e8:cf:aa:09:53:b7:54:fc:4f:
82:6d:4b:8f:11:11:e4:ee:bb:81:01:7f:c1:34:5e:99:6c:a2:
29:3a:a4:47:31:56:3a:a7:06:38:bc:7b:95:3d:4a:cb:19:a1:
f1:dd:d4:fa:41:0d:6d:43:cd:be:96:08:73:55:c5:cb:93:26:
9d:10:8a:bf:e4:c0:97:81:75:a6:ec:aa:9b:ca:2d:b9:09:46:
ed:a0:59:9b:8e:0a:11:b1:d9:39:41:17:2b:09:53:fd:c1:46:
53:a9:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:08 2025 by rpki-client